Comment by encryptluks2

What you're describing here isn't exclusive to hardware tokens and nothing preventing software from checking the domain using TOTP.